generic-fto-report
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill.md 的必需工作流会在第(3)步直接接收用户提交的
--query/--queries-json检索式并在第(4)步调用智慧芽 P002 检索，从而把外部作者可控的自由文本直接送入运行时检索路径（对外部输入的间接提示注入风险）：
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata